Share this article

Weekend Attack Drains Decentralized Protocol dForce of $25M in Crypto

dForce appears to have lost control of $25 million in bitcoin and ether held in its decentralized lending protocol.

Updated Sep 14, 2021, 8:30 a.m. Published Apr 19, 2020, 4:30 a.m.
dForce's Lendf holdings appear to be completely drained. (Credit: Shutterstock)
dForce's Lendf holdings appear to be completely drained. (Credit: Shutterstock)

Decentralized finance protocol dForce lost over 99 percent of its assets in an attack Saturday night, according to DeFi Pulse.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Lending protocol Lendf.me saw some $25 million in ether and bitcoin exit its wallets late Saturday and early Sunday after its money market pool was attacked. Lendf is one of two protocols supported by the dForce Foundation.

“Lendf.me confirmed it was attacked at 8:45 Beijing time Sunday at block height 9899681,” Lendf.me said to Chinese media outlet Chain News. dForce did not respond to CoinDesk's requests for comment by press time.

Earlier speculation from other DeFi protocol builders say the attack was caused by imBTC, an ethereum token pegged one-to-one with bitcoin, used as collateral that turned out to be fraudulent, enabling the attacker to drain funds for nearly free.

DeFiPulse shows that dForce lost $25 million between 00:00 UTC and 03:00 UTC on April 19.
DeFiPulse shows that dForce lost $25 million between 00:00 UTC and 03:00 UTC on April 19.

It is unclear whether any users were able to withdraw their funds or if the attacker seized all $25 million. Compound CEO Robert Leshner claimed the attacker seized the full total.

Lendf’s website reads “Do not supply anymore!” dForce Foundation CEO Mindao Yang said the team was “still investigating” the incident and urged users to “not supply any asset into lendf.me for now” in the protocol’s open Telegram channel. The website appeared to go down shortly after 04:00 UTC.

After the attack, DeFi Pulse reported Lendf’s accounts holding $18,900 in USD, or about 101 ether or 2.6 bitcoin as of press time. After this article was published, that sum fell to $6.

Leshner said on Twitter the firm “copy/pasted Compound v1 without changes.”

Leshner told CoinDesk on Telegram the v1 code "was not flawed," but the group was cautious about which assets it listed.

"This is a followup attack to the imBTC Uniswap attack yesterday," he said, noting that imBTC is an ERC-777 token and "not a normal Ethereum asset."

"Smart contracts that include imBTC have to be extra cautious and write additional code to protect against 're-entrancy attacks,'" he said.

A pinned tweet on Lendf’s Twitter page calls it “by far the largest fiat-back stablecoin #DeFi lending protocol.”

The dForce Foundation closed a $1.5 million strategic round led by Multicoin Capital and joined by Huobi Capital and Chinese bank CMB International (CMBI) last week. The funds were intended to grow its staff and launch additional DeFi products in the coming year.

This is a developing situation.

More For You

KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market

16:9 Image

KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.

What to know:

  • KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
  • This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
  • Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
  • Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
  • Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.

More For You

Crypto ETFs with staking can supercharge returns but they may not be for everyone

choices

From yield potential to custody risks, here’s how direct ETH and staking funds compare for different investor goals.

What to know:

  • Investors can now choose between owning ether directly or buying shares in a staking ETF that earns rewards on their behalf.
  • While staking ETFs offers yield, they come with risks and less control than holding ETH in an exchange or wallet.
  • Grayscale’s Ethereum staking ETF recently paid $0.083178 per share, yielding $3.16 in rewards on a $1,000 investment.